Nixpkgs security tracker
Incomplete privilege drop for com.system76.CosmicGreeter.GetUserData
A Privilege Dropping / Lowering Errors/Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in cosmic-greeter can allow an attacker to regain privileges that should have been dropped and abuse them in the racy checking logic. This issue affects cosmic-greeter before https://github.Com/pop-os/cosmic-greeter/pull/426.
Affected products
cosmic-greeter
- <https://github.com/pop-os/cosmic-greeter/pull/426
Package maintainers
-
@nyabinary Niko Cantero <nyanbinary@keemail.me>
-
@thefossguy Pratham Patel <prathampatel@thefossguy.com>
-
@griffi-gh Luna Prasol <prasol258@gmail.com>
-
@ahoneybun Aaron Honeycutt <aaronhoneycutt@proton.me>
-
@Pandapip1 Gavin John <gavinnjohn@gmail.com>
-
@michaelBelsanti Mike Belsanti <mbels03@protonmail.com>
-
@drakon64 Evelyn Chance <nixpkgs@drakon.cloud>
-
@HeitorAugustoLN Heitor Augusto <nixpkgs.woven713@passmail.net>
-
@a-kenji Alexander Kenji Berthold <aks.kenji@protonmail.com>
-
@alyssais Alyssa Ross <hi@alyssa.is>